From e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 31 Aug 2026 07:56:38 -0400 Subject: add: bph report iocs --- kevlar/2026-08-31/honeylabs/events-AS400992.ndjson | 1 + 1 file changed, 1 insertion(+) create mode 100644 kevlar/2026-08-31/honeylabs/events-AS400992.ndjson (limited to 'kevlar/2026-08-31/honeylabs/events-AS400992.ndjson') diff --git a/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson b/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson new file mode 100644 index 0000000..6febabe --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson @@ -0,0 +1 @@ +{"timestamp": "2026-08-30T15:38:28", "event_id": "098ea664-7e47-4ee2-b41a-1f9fb543395f", "source_ip": "194.48.142.134", "source_port": 54390, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 400992, "asn_org": "ZhouyiSat Communications", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 14, "network_bytes": 36, "event_summary": "\u0013\u0000/\rc\ufffd\u0001\u0001\u0000"} -- cgit v1.2.3